Keep Warm — Privacy Policy

Effective date: October 8, 2026

Last updated: October 8, 2026

This Privacy Policy explains how Brandon Held, an individual doing business as Keep Warm ("Keep Warm," "we," "us"), collects, uses, and protects information when you use Keep Warm, including the Keep Warm website and web app at https://getkeepwarm.app, the iOS app "Keep Warm Reminders," and any future Android app (together, the "Service").

Keep Warm is a simple relationship follow-up app that helps you stay in touch with friends, family, and clients, mainly by text message. It helps you keep track of who to contact, what to say, and when you last reached out. Keep Warm does not send texts or emails for you. When you are ready to reach out, Keep Warm hands the message to your phone's own Messages or Email app (or copies it), and you send it yourself.

If you have questions, contact us at keepwarmsupport@gmail.com.

1. Information we collect

1.1 Information you give us about yourself

• Account information: your name (display name), email address, and password. We store your password only as a one-way hash, not in readable form.
• Settings and preferences: your message tone, time zone, default follow-up rhythm for new contacts, daily list limit, and any saved message templates.
• Feedback: if you use Send Feedback, we store the note you write, linked to your account.
• Password reset: if you request a password reset, we store a hashed, single-use token that expires after 60 minutes. We do not store the raw reset link.

1.2 Information you enter about other people ("Contacts")

Keep Warm is built for keeping in touch with people you know, so most of the information in the app is information you enter about other people. This can include:

• Name
• Phone number
• Email address
• Birthday (month and day), anniversary, and other important dates you add
• Notes, a short "about" description, and a relationship label
• Optional real estate fields, such as a closing date, a property label, and interests
• Follow-up rhythm, "last contacted" date, and a Do Not Contact flag
• Scheduled messages (each with a private title, a due date, and message text)
• Check-ins, message drafts, and outreach history, such as whether you chose Text, Email, Copy, or Already sent, when you handed a message off, and when you confirmed that you sent it

You can add this information by hand, by uploading a CSV or contacts file (.vcf), or (in the mobile app) by choosing people from your phone's contacts (see Section 1.3).

Your responsibility: when you add someone's information to Keep Warm, you are responsible for having a lawful basis to do so and for using it appropriately. We process contact information on your behalf to provide the Service to you. We do not use the people in your contacts list for our own marketing, and we do not contact them.

1.3 Your phone's contacts (mobile app only)

The iOS app (and the Android app, when available) can read your phone's address book only when you tap "Connect to Contacts" and grant permission through your phone's system prompt.

• The app requests only name, phone numbers, and email addresses from your phone's contacts. It does not request birthdays, notes, organization, or other fields.
• The list is shown to you on your phone. Only the people you check are imported into Keep Warm (one name, one phone number, and one email address per person). People you do not check are not uploaded or stored.
• Keep Warm reads contacts at that moment only. It does not sync with your address book in the background and does not write to or change your phone's contacts.
• On iPhone, if you allow limited access, the app only sees the contacts you chose to share.
• You can turn off contacts access at any time in your phone's Settings. Contacts you already imported stay in Keep Warm until you delete them.

1.4 Information collected automatically

• Sign-in session: when you sign in, we set a secure, httpOnly cookie that contains a random session token. Sessions expire after 30 days or when you sign out. This cookie is needed for the Service to work; we do not use it for advertising.
• Usage counts: we keep simple counts for each account, such as the number of imports, messages reviewed, handoffs, confirmed check-ins, and weekly return visits. These counts do not include message text, names, phone numbers, or email addresses. You can see these counts in Settings.
• Server and hosting logs: like most websites, our hosting provider may automatically log technical information when you use the Service, such as IP address, browser or device type, and the pages or requests made. Our host, Vercel, keeps these server logs briefly to operate and secure the Service.
• App Store / TestFlight data: if you use the iOS app through TestFlight or the App Store, Apple may collect information such as crash reports and usage data under Apple's own privacy policy. If you opt in to share analytics through your Apple device settings, Apple may provide us with aggregated app analytics and crash reports. We may also receive feedback you choose to send through TestFlight.

What we do not use: Keep Warm does not use third-party analytics, advertising SDKs or networks, tracking pixels, third-party error tracking, or a third-party sign-in provider. Keep Warm does not track you across other companies' apps or websites.

1.5 Daily reminder notifications (optional)

If you turn on daily reminders in the iOS app, we send push notifications through Apple's push notification service (APNs). Reminders are opt-in, and you can turn them off at any time in the app or in your phone's Settings.

• What we store: a device push token (a code Apple issues so we can deliver notifications to your device), the reminder time you choose, your time zone, and the dates reminders were sent.
• How we use it: the push token is used only to send your reminders. Notifications show only a count (for example, how many check-ins are due) and never include contact names or message text. We never use notifications for marketing.
• When it is deleted: the push token is deleted when you sign out, turn off reminders, or delete your account.

1.6 Payment information

Keep Warm subscriptions are sold through Apple in-app purchase. Apple handles billing, renewal, cancellation, and refunds under its own terms and privacy policy. We do not receive or store your payment card details. We verify purchases directly with Apple and may receive limited information about your purchase, such as whether your subscription is active, its renewal status, and a transaction identifier, so we can give you access to the features you paid for. We store an Apple-provided purchase and account identifier to match subscriptions to accounts. We do not use any other subscription management provider. Subscriptions cost $4.99 per month or $39.99 per year (US prices, plus applicable taxes), renew automatically through Apple in-app purchase, and include a 7-day free trial for new subscribers that converts to a paid subscription unless you cancel at least 24 hours before it ends. You can cancel in your Apple ID subscription settings. Prices may change with notice, as Apple's process allows. See our Terms of Service for details.

2. How we use information

We use information to:

• Create and manage your account, sign you in, and reset your password;
• Store your contacts, important dates, notes, and scheduled messages, and show you your Today list of check-ins and your outreach history;
• Prepare message drafts for you to review, and hand them off to your phone's Messages or Email app when you choose;
• Respect the Do Not Contact flag and your follow-up rhythms;
• Send you transactional emails, such as password reset links (we do not send marketing email);
• Send daily reminder notifications if you turn them on;
• Respond to your feedback and support requests;
• Understand, in aggregate, whether the Service is working and being used (using the usage counts described above);
• Keep the Service secure, prevent abuse, and fix problems; and
• Comply with legal obligations and enforce our Terms of Service.

We do not use the content of your contacts, notes, or messages to advertise to you or to the people in your contacts.

3. We do not sell your data

We do not sell your personal information or the information you enter about your contacts. We do not "share" personal information for cross-context behavioral advertising, as those terms are defined under California law.

4. Service providers and other sharing

We share information only as needed to run the Service, with service providers that process it on our behalf:

We do not use any other service providers to process your personal information. If we add one, we will update this policy.

When you send a message: when you tap Text or Email, Keep Warm opens your phone's own Messages or Email app with the draft filled in. The message is then sent by your phone, mobile carrier, and/or email provider, not by Keep Warm, and their own privacy policies apply.

We may also disclose information:

• If required by law, court order, or other legal process;
• To protect the rights, safety, or property of our users, the public, or us;
• In connection with a merger, acquisition, financing, or sale of all or part of our business, in which case this policy (or one at least as protective) will continue to apply; or
• With your permission.

5. How long we keep information

• Account and contacts data: we keep your account information, contacts, messages, and history for as long as your account is active, or until you delete it.
• Deleted contacts, records, and accounts: when you delete a contact, another record, or your whole account, it is removed from our active database right away. Copies may remain in database backups for a short period before they are overwritten.
• Sessions: expire after 30 days or at sign-out.
• Password reset tokens: expire after 60 minutes and can be used once.
• Feedback: kept until your account is deleted.
• Reminder data: your reminder time, time zone, and the dates reminders were sent are kept while reminders are on and deleted with your account. The push token is deleted when you sign out, turn off reminders, or delete your account.
• Hosting logs: kept briefly by our host to operate and secure the Service.
• After account deletion: we keep only what the law requires us to keep. Apple separately keeps records of your purchases under its own policies.

6. Deleting your data and your account

• Delete contacts: you can edit or delete any contact at any time in the app.
• Export: you can export your contacts to a file from the app.
• Delete your account in the app: go to Settings > Plan / Subscription > Delete account. This permanently deletes your account and all associated data, including your contacts, dates, notes, messages, history, and feedback. Deletion happens right away and cannot be undone. Database backups may still hold this data for a short period before it is overwritten.
• Delete without the app: if you no longer have the app, you can request deletion of your account and data at https://getkeepwarm.app/delete-account, or by emailing keepwarmsupport@gmail.com from the email address on your account.
• Apple subscriptions: deleting your Keep Warm account does not cancel a subscription purchased through Apple. You manage and cancel Apple subscriptions in your Apple ID settings.
• Phone contacts access: you can revoke Keep Warm's access to your phone contacts at any time in your phone's Settings.

7. Security

We use reasonable safeguards designed to protect your information, including:

• Encrypted connections (HTTPS) between your device and our servers;
• Passwords stored only as one-way hashes, and password reset tokens stored only as hashes;
• Random session tokens kept in secure, httpOnly cookies;
• Account isolation, so each account can only read and change its own data.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please use a strong, unique password. If we learn of a security incident that affects your information, we will notify you as required by law.

8. Children

Keep Warm is not directed to children under 13, and we do not knowingly collect personal information from children under 13. You must be at least 13 years old to create an account. If we learn that we have collected personal information from a child under 13, we will delete it. If you believe a child under 13 has created an account, please contact us at keepwarmsupport@gmail.com.

Users aged 13 to 17 (or under the age of majority where they live) may use Keep Warm only with the permission of a parent or legal guardian, as described in our Terms of Service.

Users should not add information about children to the Service unless they have the right to do so (for example, as the child's parent or guardian).

9. Your rights and choices

Depending on where you live, you may have rights over your personal information, including the right to:

• Access the personal information we hold about you;
• Correct inaccurate information;
• Delete your information;
• Get a copy (data portability), for example by exporting your contacts;
• Object to or restrict certain processing;
• Withdraw consent where we rely on consent (for example, phone contacts access); and
• Not be discriminated against for exercising your rights.

You can do much of this yourself in the app (edit, delete, export, and delete your account). For anything else, email us at keepwarmsupport@gmail.com. We may need to verify your identity before acting on a request. You may use an authorized agent where the law allows. We will respond within the time required by applicable law.

California residents (CCPA/CPRA): in the past 12 months we have collected the categories of information described in Section 1: identifiers (such as name and email), customer records, internet or other electronic activity (such as session and log data), device identifiers (such as a push token, if you turn on reminders), and the contact information you add about others. We collect it for the purposes in Section 2 and disclose it only to the service providers in Section 4. We do not sell or "share" personal information, and we do not use sensitive personal information to infer characteristics about you.

Users in the EEA, UK, and Switzerland (GDPR): Brandon Held, doing business as Keep Warm, is the controller of your account information. For information you enter about your contacts, you decide what to enter and why, and we process it to provide the Service to you. Our legal bases are: performing our contract with you (providing the Service), our legitimate interests (keeping the Service secure and improving it), consent (for example, phone contacts access, which you can withdraw), and legal obligations. Your information is transferred to and stored in the United States (see Section 10). You have the right to complain to your local data protection authority.

People whose information was added by a Keep Warm user: if you believe someone added your information to Keep Warm and you have questions, you can contact us at keepwarmsupport@gmail.com. Because users control their own contact lists, we may refer your request to the user who added you where appropriate.

10. International users

Keep Warm is operated from Maryland, United States, and our database is hosted in the United States. If you use the Service from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those where you live. By using the Service, you understand that your information will be handled in the United States as described in this policy.

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you in the app or by email before the changes take effect, and we will update the "Last updated" date above. Continuing to use the Service after the changes take effect means you accept the updated policy.

12. Contact us

Brandon Held, doing business as Keep Warm

Maryland, USA

Email: keepwarmsupport@gmail.com